26 comments:

I'm noticing an issue on all clients that utilize the WSUS server. KB2720211 is installed and I'm not sure if this is the cause or not. The clients basically state that the Windows Update Agent needs to be installed. When it attempts to install from WSUS, it fails with error 8007041B. In the update history, you can see that it tried to install WUA ver. 7.6.7600.256. Not sure if this failure is related to KB2720211 or how to resolve this.

None of the posts fixed for me. I used the log in the temp folder of the profile I was logged in with to resolve the update issue (mWusCa.log) Basically it was privs connecting to the database. Since I wasn't logged in with the id that originally attached the sus db to the databaseserver, I first gave dbo to the id I was logged in with on the sus server. Then MWusCa.log changed next time I tried to install & had a message that I needed either dbo or sql sysadmin role. I added the sus computer account to the sql sysadm role on the database server & got it to install. I also had a com+ error which I fixed early on so I'm unsure if it helped resolve the issue. I tracked it back to the com+ package named MsDtsServer. I found it by searching the registry using the guid that showed up in my event log (system log). Then I just opened component services & added the id shown in the event log with local launch & local activation.

Its worth noting that the Yukon key was set to 0 on my sus server so going that route wasn't an option (plus it needs to connect to the db to run some scripts)

Finding the mWusCa.log you mentioned helped me solve my problem. I thought I had the same issue but the problem actually was mirroring the SUS server. Once I broke the mirror the update ran fine. Of course, I had to rebuild it after that but at least I got the patch installed.

Well this specific post didn't do it but it got me on the right track. I was able to fix it on Windows 2008 R2 by extracting the update and running the MSP manually (there were no CABs). It gave me a handful of nonfatal errors about writing to registry keys but in the end succeeded.

I was 99% over my paranoia about automatic patching/updating before this. Now I'm back in rehab.

Thanks! worked for us wihtous the SQL part.First I changed the HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\wYukonInstalled to 0Run the update and changed it back to 1.

than: ◦Download and run WSUS-KB270211-x64.exe /extract to extract the files. ◦Use a program capable of extracting CAB files (7 zip) to open PCW_CAB_SUS and copy the files DbCert, DbCertDll, and DbCertSql ◦Rename those files to WSUSSignDb.cer, WSUSSignDb.dll, and WSUSSignDb.sql. ◦Copy the cer and dll file to: C:\Windows\Sysmsi\ssee\mssql.22005\mssql\schemasig ◦Copy the sql file to C:\Program Files\Update Services\Database •Rerun the update again..

I managed to fix my Windows 2008 R4 64bit WSUS Server by downloading KB2720211. Extract WUSSetup.msp from WSUS-KB2720211-x64.exe with 7-Zip (free utility). Once done just run WUSSetup.msp (a simple double click will do the job). You'll get a few error messages. Just click ignore. When the program has finished installing, reboot server and start your WSUS Console. All should be up and running beautifully.

I had this same issue.the WSUS runs on a windows server 2003. My clients computer started to get updates after installing the KB2720211 update. but the synchronization process stopped. After restarting the server, the synchronization issue was fixed.

Just ran into this on a virgin 2003 server install (using the internal db and not sql). Took two days to find this, and it worked. The only thing I actually had to do was extract and copy the WSUSSignDb.sql. Stopped IIS and Update services, reran the update and it worked fine.

About Me

A computer consultant and instructor for about 15 years, I am one of the partners in Conexion Networks (www.conexion.ca) located in Winnipeg, Canada. In the last few years I have been primarly focussed on consulting and book writing. I was one of the primary authors of Microsoft Official curriculum for Exchange Server 2007/2010 and Windows Server 2008/2012 and a co-author of the Windows Server 2008 Active Directory Resource Kit. I am also a Microsoft MVP for Exchange Server. @ByronWrightGeek